...
Document Version Release Date Details 3 08/dd/2018 Updated the Resolution with the security certificate changed on 27-Jun-2018. 2 06/28/2018 Updated the Resolution with more information and instructions for the Manual Fix. 1 10/11/2017 Original Document Release. A change occurred in the security certificate information on the server that hosts the HPE web service used for the HPE Intelligent Management Center (IMC) LiveUpdate and product registration features. The result is an inability for IMC to connect to the HPE web service that provides software update information and the update(s) will not occur. When accessing the LiveUpdate feature: System -> Resource Management -> LiveUpdate -> IMC Software Update / Device Software Update -> Next -> Get Update List , the issue is indicated by a " no updates found " error message. When this occurs, error message " unable to find valid certification path to requested target " will appear in the imcforeground_<version>.log. Example logs below from IMC version 7.3 (E0506): 2017-08-21 16:29:45 [ERROR] [http-nio-8080-exec-25] [com.imc.res.liveupdate.LiveUpdateClient::getProductByJNumbers] javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at sun.security.ssl.Alerts.getSSLException(Alerts.java:192) * * Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target * * Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target Similar errors are seen on other versions of IMC Platform software.
All versions of the HPE Intelligent Management Center (IMC) Platform are affected by this issue, including the LiveUpdate and HPE network product registration.
The security certificate change occurred on 27-Jun-2018. HPE recommends implementing this security certificate fix dated 27-Jun-2018 to avoid non-functioning of the LiveUpdate feature. The preferred solution has been implemented in a hot patch, IMC PLAT v7.3 (E0605H05). The patch can only be applied to IMC PLAT v7.3 (E0605P04). Software Fix Download URL for IMC Standard: https://h10145.www1.hpe.com/downloads/SoftwareReleases.aspx?ProductNumber=JG747AAE Download URL for IMC Enterprise: https://h10145.www1.hpe.com/downloads/SoftwareReleases.aspx?ProductNumber=JG748AAE Manual Fix This fix can be implemented in environments that prefer to stay on a version of the IMC Platform instead of updating to the build with the fix. 1) Contact HPE IMC technical support for a file you will need. The file should be sent via email. 2) Stop IMC using iDMA (Intelligent Deployment Monitoring Agent). 3) Navigate to the following folder: Windows: <imc_install_dir>\common\jre\lib\security For example, C:\Program Files\iMC\common\jre\lib\security Linux: <imc_install_dir>/common jre/lib/security For example, /opt/iMC/common jre/lib/security 4) Backup the cacerts file (for example, by renaming to cacerts.bak). 5) Replace the original cacerts file with the file provided by tech support. 6) Restart IMC using iDMA and the Live Update should now work with the https URL. NOTE: Products sold prior to the November 1, 2015 separation of Hewlett-Packard Company into Hewlett Packard Enterprise Company and HP Inc. may have older product names and model numbers that differ from current models. RECEIVE PROACTIVE UPDATES : Receive support alerts (such as Customer Advisories), as well as updates on drivers, software, firmware, and customer replaceable components, proactively via e-mail through HPE Subscriber's Choice. Sign up for Subscriber's Choice at the following URL: Proactive Updates Subscription Form. SEARCH TIP : For hints on locating similar documents on HPE.com, refer to the Search Tips document .